Privacy policy
Effective 5 November 2026
This policy explains how QuoteLoop, the service at quoteloop.trade ("QuoteLoop", "we"), handles information when you create an account, connect a mailbox or Google account, and use the workspace.
Information we collect
- Account information. When you sign in with Google or Microsoft we receive your name, email address and the provider's account identifier (OpenID Connect scopes
openid email profile). We use them to create your account and sign you in. We do not receive your password. - Mail you choose to process. Messages in the mailbox folder you select, or messages you forward to your workspace's intake address, and their attachments (orders, enquiries, supplier quotes).
- Connected-account tokens. If you connect Gmail, Outlook or Google Drive, we store the access tokens those services issue, encrypted, for your workspace only.
- Workspace content you create. Reviewed order lines, quotations, drafts, decisions and settings.
- Operational records. Sign-in sessions, an audit log of actions in your workspace, and server logs needed to run and secure the service.
How we use Google user data
QuoteLoop requests only the Google permissions a feature needs, when you turn that feature on:
- Sign in (
openid email profile): to create your account and identify you when you sign in. - Send email from Gmail (
gmail.send): to send a reply or quotation email that you have reviewed and chosen to send. QuoteLoop does not read your Gmail inbox. - Google Drive and Sheets (
drive.file): to create and update the spreadsheets QuoteLoop makes for your approved orders in a folder you choose. QuoteLoop cannot see other files in your Drive.
QuoteLoop's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. We use Google user data only to provide the features you use in QuoteLoop. We do not sell it, use it for advertising, or use it to train general-purpose AI models. People at QuoteLoop do not read it, except with your permission, when needed for security, or to comply with the law.
Microsoft accounts
If you sign in with Microsoft or connect Outlook, we use Microsoft Graph only to identify you, read messages in the folder you choose, and create or send the replies you approve.
Service providers
- Google Cloud (United States) hosts the service and its database.
- Anthropic (Claude API) processes short excerpts of incoming messages to suggest which deal an email belongs to. Anthropic does not use API data to train its models.
- PostHog provides product analytics and session recordings that mask typed text and workspace content.
We do not sell personal information and do not share it with anyone else except where required by law.
Separation and security
Each workspace's data is kept separate by database-level row security. Connection tokens are encrypted. The service is only reachable over HTTPS.
Retention and deletion
We keep workspace data while your account is active. You can disconnect Gmail, Outlook or Google Drive at any time in Settings, which deletes the stored tokens; you can also remove QuoteLoop's access in your Google or Microsoft account settings. To delete your account and workspace data, use the contact details on the welcome page; we delete it within 30 days, except records we must keep by law.
Children
QuoteLoop is a business tool and is not intended for anyone under 16.
Changes
We will post changes on this page and update the effective date. Significant changes will be announced in the app.
Contact
For privacy questions or requests, use the contact details on the welcome page.